Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File: RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier: eh+A7JSXn3t/1RWdsflOCJuL/vax9xfXvdZmxvUdiBg=
Subject key identifier: 47:08:23:3E:BA:65:41:67:B0:DF:AE:3E:F3:35:ED:C6:F8:53:98:B2
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 0198D65F24E37543B88A90A84F8ED4B114E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: 9L0Co8CEy186G13kaYMinlb5Afg.roa (hash: 6p7nu1hIgCVQFvaFdpUf1fbcZ1K03G9ItG/q4By8N9A=)
2: E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa (hash: YbPt+4+0edt07crfTPCARczh/UjImehgu5s1r3RYYLE=)
3: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: g0cuu6yU238fcCqZz6JWAEPMvP/hQUfr/7UUQ8P1P50=)
4: o4qJydU8QHB9yf5elCeoJvNBmoA.roa (hash: 2K8rsjnSWXQjx0NDAMp9U5sFUQZR7E/jK97Yg8CSOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:24:e3:75:43:b8:8a:90:a8:4f:8e:d4:b1:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=4708233eba654167b0dfae3ef335edc6f85398b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:16:4c:97:a3:cf:aa:fd:ad:a4:0f:52:06:
ff:56:6c:6a:76:aa:5e:c8:a9:09:5a:fd:44:b5:25:
69:a3:44:03:45:ac:61:15:26:c5:aa:6d:aa:0f:ff:
70:bf:be:93:63:0f:8f:ce:a0:44:64:33:5e:d4:5a:
a4:d6:36:db:7b:71:01:7d:e5:07:be:54:49:93:24:
94:20:75:d4:b1:be:75:d5:11:08:58:ba:43:ab:5c:
3f:7e:8e:17:c0:cb:bb:e0:6b:4e:67:58:cb:5c:98:
c8:79:fb:1d:eb:77:20:c2:a9:5d:1c:86:a7:09:64:
75:b7:56:77:13:84:eb:a2:2b:68:76:ad:52:7a:fb:
0b:2d:10:b3:e4:a7:0c:8c:ee:e8:55:f5:bb:46:01:
62:ea:38:f8:2e:d9:4b:24:6e:be:de:e2:88:60:e1:
d9:c4:fb:f5:59:f0:ef:e2:b4:db:6e:01:49:d9:1c:
58:9f:14:4d:03:73:db:a2:c7:2c:a2:26:e9:bf:68:
b0:9d:13:d9:ca:0b:07:ad:c7:ec:ec:6b:e4:cb:b2:
49:78:bb:10:5d:96:da:da:d6:ec:b8:0c:a5:18:19:
a5:c0:5b:2a:f6:b8:54:e9:1b:07:cb:6a:82:fe:c4:
fd:6d:f1:ca:a4:f7:a4:9d:4b:af:99:cb:86:53:56:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:23:3E:BA:65:41:67:B0:DF:AE:3E:F3:35:ED:C6:F8:53:98:B2
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a8:93:cf:89:d2:1a:7c:51:21:67:f9:2b:18:bf:ff:91:ea:
d2:b3:51:05:17:d7:cc:b3:30:fa:c6:32:2b:62:60:4e:9a:b4:
c8:81:aa:a2:63:43:6b:ff:6d:da:6d:0d:e5:aa:63:92:24:12:
41:53:fa:bd:d6:6f:b8:fc:c3:7c:82:57:d4:ab:37:e8:11:18:
85:eb:3a:91:d1:15:f2:fc:4a:b0:89:45:ec:77:ad:43:1c:61:
11:e6:ee:45:2a:85:79:6e:1c:d6:48:8d:3d:e0:18:e6:0a:da:
21:c4:89:0a:0c:16:a9:f1:aa:37:1f:d5:7b:c0:9e:6a:10:a4:
02:13:4c:19:0e:f9:7e:85:d5:43:52:6b:9c:ff:f1:c1:81:f0:
1c:b0:c6:43:9f:75:53:dd:28:d1:85:c1:4f:6c:91:b4:3a:c7:
3b:f7:08:5e:09:61:d3:09:c9:b8:1f:d0:af:33:09:2f:54:a3:
16:51:63:5e:15:36:fa:54:7f:ff:a0:f0:fa:ce:d3:82:4a:e1:
1f:5a:34:70:97:bb:cb:2a:6c:de:c4:de:60:75:cc:28:dc:68:
5d:b2:c8:83:1c:2d:b8:0b:24:14:e2:c5:2a:ef:c4:87:a1:d7:
90:1b:58:de:fe:9b:1e:27:77:99:dd:df:2f:0b:35:e7:b0:a7:
14:f6:61:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyTjdUO4ipCoT47UsRToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh
ZGUyYTIwHhcNMjUwODIzMTAwMDE2WhcNMjUwODI0MTAwMDE2WjAzMTEwLwYDVQQD
Eyg0NzA4MjMzZWJhNjU0MTY3YjBkZmFlM2VmMzM1ZWRjNmY4NTM5OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMYWTJejz6r9raQPUgb/Vmxqdqpe
yKkJWv1EtSVpo0QDRaxhFSbFqm2qD/9wv76TYw+PzqBEZDNe1Fqk1jbbe3EBfeUH
vlRJkySUIHXUsb511REIWLpDq1w/fo4XwMu74GtOZ1jLXJjIefsd63cgwqldHIan
CWR1t1Z3E4Troitodq1SevsLLRCz5KcMjO7oVfW7RgFi6jj4LtlLJG6+3uKIYOHZ
xPv1WfDv4rTbbgFJ2RxYnxRNA3Pboscsoibpv2iwnRPZygsHrcfs7Gvky7JJeLsQ
XZba2tbsuAylGBmlwFsq9rhU6RsHy2qC/sT9bfHKpPeknUuvmcuGU1Zr4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcIIz66ZUFnsN+uPvM17cb4U5iyMB8GA1UdIwQY
MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt
N2E1NGRiNTllYzJkLzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk
LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKiTz4nS
GnxRIWf5Kxi//5Hq0rNRBRfXzLMw+sYyK2JgTpq0yIGqomNDa/9t2m0N5apjkiQS
QVP6vdZvuPzDfIJX1Ks36BEYhes6kdEV8vxKsIlF7HetQxxhEebuRSqFeW4c1kiN
PeAY5graIcSJCgwWqfGqNx/Ve8CeahCkAhNMGQ75foXVQ1JrnP/xwYHwHLDGQ591
U90o0YXBT2yRtDrHO/cIXglh0wnJuB/QrzMJL1SjFlFjXhU2+lR//6Dw+s7Tgkrh
H1o0cJe7yyps3sTeYHXMKNxoXbLIgxwtuAskFOLFKu/Eh6HXkBtY3v6bHid3md3f
Lws157CnFPZhBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:12 2025 by rpki-client